Advisory Catalog

LibreNMS has a Stored XSS in Alert Rule

LibreNMS has a Stored XSS in Custom OID - unit parameter missing strip_tags()

LibreNMS /port-groups name Stored Cross-Site Scripting

LibreNMS /device-groups name Stored Cross-Site Scripting

LibreNMS affected by reflected xss via email field

OpenClaw: Process Safety - Unvalidated PID Kill via SIGKILL in Process Cleanup

OpenClaw Chutes manual OAuth state validation bypass can cause credential substitution

OpenClaw has a Path Traversal in Browser Download Functionality

OpenClaw affected by SSRF in optional Tlon (Urbit) extension authentication

OpenClaw Twilio voice-call webhook auth bypass when ngrok loopback compatibility is enabled

OpenClaw Telegram allowlist authorization accepted mutable usernames

OpenClaw affected by denial of service through unguarded archive extraction allowing high expansion/resource abuse (ZIP/TAR)

OpenClaw: denial of service through large base64 media files allocating large buffers before limit checks

OpenClaw iMessage group allowlist authorization inherited DM pairing-store identities

OpenClaw skills.status could leak secrets to operator.read clients

OpenClaw MS Teams inbound attachment downloader leaks bearer tokens to allowlisted suffix domains

OpenClaw has a Matrix allowlist bypass via displayName and cross-homeserver localpart matching

OpenClaw affected by SSRF via attachment/media URL hydration

Indico Affected by Cross-Site-Scripting via material uploads

Indico has Server-Side Request Forgery (SSRF) in multiple places

OpenClaw's Chrome extension relay binds publicly due to wildcard treated as loopback

BSV Blockchain SDK has an Authentication Signature Data Preparation Vulnerability

ImapEngine affected by command injection via the ID command parameters

Cloudflare Agents has a Reflected Cross-Site Scripting (XSS) vulnerability in AI Playground site

Child processes spawned by Renovate incorrectly have full access to environment variables

beautiful-mermaid contains an SVG attribute injection issue that can lead to cross-site scripting (XSS)

sqlparse: formatting list of tuples leads to denial of service

Cloudflare Agents is Vulnerable to Reflected Cross-Site Scripting in the AI Playground's OAuth callback handler

DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attackers to identify valid user accounts. Attackers can submit different usernames to the password reset endpoint and distinguish between existing and non-existing accounts by analyzin

Directus Vulnerable to User Enumeration via Password Reset Timing Attack

@farmfe/core is Missing Origin Validation in WebSocket

markdown-it is has a Regular Expression Denial of Service (ReDoS)

qs's arrayLimit bypass in comma parsing allows denial of service

ajv has ReDoS when using `$data` option

This module enables you to integrate and manage icons with Drupal. The module doesn't sufficiently sanitize user input leading to a reflected Cross-site Scripting (XSS) vulnerability. The vulnerability is mitigated by the fact that in order to be vulnerable, the "UI Icons for CKEditor 5" submodule

Statamic CMS's missing authorization allows access to assets

This module allows content to be edited in-place. The module doesn't sufficiently sanitize certain image-related values during the editing process leading to a persistent Cross-site Scripting (XSS) vulnerability. This vulnerability is mitigated by the fact that an attacker must have permission to

Kimai 2 vulnerable to persistent cross-site scripting in the timesheet descriptions

Phraseanet vulnerable to stored cross-site scripting through crafted file names

@langchain/community affected by SSRF Bypass in RecursiveUrlLoader via insufficient URL origin validation

Microsoft Windows NULL Pointer Dereference Vulnerability

Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

cap-go/capacitor-native-biometric Authentication Bypass

amphp/http-server affected by HTTP/2 DDoS vulnerability

Cube Core is vulnerable to Denial of Service (DoS) via crafted request

unity-cli Exposes Plaintext Credentials in Debug Logs (sign-package command)

FroshAdminer Adminer UI is accessible without admin session

LangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header Injection

Craft CMS Vulnerable to Stored XSS in Number Prefix & Suffix Fields

Craft CMS Vulnerable to SSRF in GraphQL Asset Mutation via Alternative IP Notation